37360 matches found
CVE-2025-12623
CVE-2025-12623 affects the fushengqian fuint system, specifically the code path in fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientSignController.java (Authentication Token Handler). The Red Hat/NVD entries describe an authorization bypass that can be triggered remotel...
[SECURITY] Fedora 42 Update: rust-interpolator-0.5.0-3.fc42
Runtime format strings, fully compatible with std's macros...
[SECURITY] Fedora 42 Update: rust-astral-tokio-tar-0.5.6-1.fc42
A Rust implementation of an async TAR file reader and writer. This library does not currently handle compression, but it is abstract over all I/O readers and writers. Additionally, great lengths are taken to ensure that the entire contents are never required to be entirely resident in memory all ...
PT-2025-49375
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the KVM subsystem related to memory management. Specifically, the issue arises when unbinding a memslot from a guest memfd instance while the...
NetSurf 安全漏洞
NetSurf is a lightweight browser from the NetSurf organization. A security vulnerability exists in NetSurf version 3.11, which stems from a post-release reuse issue with the domnodesettextcontent function...
xorg-x11-server update
1.20.11-32 - CVE fix for: CVE-2025-62229 RHEL-119961, CVE-2025-62230 RHEL-120032, CVE-2025-62231 RHEL-125001...
Debian dla-4358 : wordpress - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4358 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4358-1 [email protected]...
Fedora 43 : skopeo (2025-af04521261)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-af04521261 advisory. Security fix for CVE-2025-58189, CVE-2025-61725 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...
ksmbd: prevent connection release during oplock break notification
...
[SECURITY] Fedora 41 Update: ruby-3.3.10-21.fc41
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: vhci: Prevent use-after-free by removing debugfs files early The creation of debugfs files is moved to a dedicated function, and it is ensured that these files are explicitly removed during vhcirelease, before the...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed a bug caused by a preallocation collision. When the user space uses AFRXRPC to provide a server, it must pre-allocate incoming calls and assign them call IDs that will be used for recvmsg and sendmsg calls. The...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fixed the refcount leak that caused resources not to be released. When ksmbdconnreleasingopinfo-conn returns true, the refcount was not decremented properly, resulting in a refcount leak. This prevented the refcount from...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: net:kcm: A race condition was fixed in kcmunattach. syzbot identified a race condition when kcmunattachpsock and kcmreleasekcm are executed simultaneously. The kcmunattach function lacks a check for the kcm-txstopped flag before...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: The issue related to media:imagination: a potential memory leak was fixed in e5010probe. Additionally, videodevicerelease was added to release the memory allocated by videodevicealloc in case of any issues...
[SECURITY] Fedora 42 Update: qt5-qtbase-5.15.17-2.fc42
Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...
The vulnerability of the user_cluster_connect() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the userclusterconnect function in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Photon OS 4.0: Openjdk11 PHSA-2025-4.0-0896
An update of the openjdk11 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0896. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2013-10071
Nagios XI versions prior to 2012R1.6 contain a reflected cross-site scripting XSS vulnerability in the dashboard dashlet AJAX load functionality. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's...
CVE-2011-10039
Nagios XI versions prior to 2011R1.9 are vulnerable to cross-site scripting XSS via the Alert Heatmap report and the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of...